Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5930bdac-eb44-3ddd-8f9f-530714e31746.roa
File:                     5930bdac-eb44-3ddd-8f9f-530714e31746.roa (raw, json)
Hash identifier:          +5m8cjYcOaT5yxAwdUfSOsD1VrHCoOCpTUJSDvUU7bM=
Subject key identifier:   49:ED:B7:B3:66:DA:1F:EC:90:4A:1E:ED:98:34:F8:E2:CB:70:9F:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89C71778AC4D8EB9059DB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5930bdac-eb44-3ddd-8f9f-530714e31746.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        174.166.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:c7:17:78:ac:4d:8e:b9:05:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=8076593f-d4a9-47e0-a528-a44d4e163019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:c9:fa:0a:9e:da:27:99:fe:4d:b9:7e:4a:
                    ba:71:28:1c:84:23:9c:55:d2:59:97:21:74:8d:36:
                    11:4c:fb:81:f9:51:bc:18:bd:eb:40:c4:e0:b0:59:
                    9f:b2:06:d6:da:8a:35:91:19:14:49:2d:c7:34:08:
                    02:e1:6d:61:3f:97:f0:3a:5b:88:c1:9e:0a:86:a5:
                    c1:ea:2e:83:bb:da:46:52:ff:e1:33:da:47:e0:bb:
                    b0:97:e8:dc:d2:af:fc:6d:5e:ab:e0:44:7a:c6:53:
                    69:80:eb:de:f8:59:c4:ce:82:68:30:b8:6c:d9:dd:
                    6a:f7:87:d3:73:89:1a:c0:b6:e2:e6:38:90:ac:11:
                    bc:b8:1a:a3:e0:44:ee:23:d1:bb:52:67:07:ab:42:
                    6d:db:1e:14:ad:1b:cc:c6:21:2f:de:4c:0a:3a:6c:
                    9f:c8:95:9b:79:df:7d:86:e5:66:42:c0:f1:44:29:
                    63:5b:10:b0:39:dc:11:6d:c9:5c:81:18:21:16:b1:
                    06:19:8c:cb:1b:82:77:31:95:78:1c:07:3b:cb:7d:
                    8b:ed:b8:61:c1:9d:3f:cc:1a:63:96:09:52:ae:33:
                    7c:40:0d:4e:40:b4:ca:12:ff:75:0b:22:87:a9:e5:
                    4d:53:f5:6f:01:2b:a3:34:6c:5e:9d:2a:b8:9f:b5:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:ED:B7:B3:66:DA:1F:EC:90:4A:1E:ED:98:34:F8:E2:CB:70:9F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5930bdac-eb44-3ddd-8f9f-530714e31746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.166.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:1a:16:46:de:dd:24:60:d8:07:e7:51:34:82:14:5c:4a:ab:
         8e:e2:64:13:23:8f:e7:55:4c:4a:49:61:94:dc:ac:79:70:f8:
         fe:2d:ce:bb:84:25:d8:b7:02:b7:2a:06:5c:59:df:45:78:46:
         0b:ce:2c:79:bd:fd:52:d5:40:bd:0e:a4:69:80:9d:bc:9f:0f:
         50:65:94:9b:3c:80:7e:44:35:fa:96:ea:6e:89:ee:ff:55:43:
         a7:52:1a:86:7a:a5:62:4e:79:d6:41:96:69:c7:90:ee:91:66:
         bb:d6:fa:c9:6b:fa:65:d5:b1:ff:66:2b:f7:fd:e8:29:29:0b:
         df:c3:6c:8d:a9:ea:a6:3f:ac:c2:bd:c8:5d:39:71:f1:bc:bb:
         30:63:6a:f9:c0:0d:ea:b4:5a:d0:25:6e:79:a8:44:a5:7d:50:
         e8:0b:b9:d4:51:64:f8:c0:31:e3:8f:d0:7a:8f:80:be:a3:75:
         a2:71:9b:8c:98:b6:2f:fc:a5:5d:0a:90:c4:0b:ee:7b:a5:b6:
         0e:0b:76:db:22:17:6f:75:9d:05:75:b6:a5:05:69:ea:28:08:
         3d:92:0f:f6:e8:67:c3:9c:e1:e4:b3:e6:6d:95:2b:a6:bc:2c:
         b4:f8:23:ea:2b:7b:7d:7d:e7:18:49:d9:f9:8b:f9:8c:f2:c6:
         d5:28:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:12 2024 by rpki-client on console-fra.rpki-client.org